CVE-2019-7642

HIGH

7.5

Description

D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/25/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

dlink:dir-816dlink:dir-816_firmwaredlink:dir-816ldlink:dir-816l_firmwaredlink:dir-817lwdlink:dir-817lw_firmwaredlink:dir-850ldlink:dir-850l_firmwaredlink:dir-868ldlink:dir-868l_firmware

Faiblesses (CWE)

CWE-306

References

https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md(cve@mitre.org)

https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.